Episode 199 - Building A Security Strategy - Part II
Recap
Strategy vs Policy
Understand the business of your Business
Know who your stakeholders really are
Capability = (Tech + Service) * Process
Crawl, Walk, Run
It Takes A Village
The Question is “How do I make one?”
Almost no business is in the business of information security
Follow The Money
Understand The Decisioning Process
“Culture Eats Strategy For Breakfast”
Vocabulary Matters
Understand the Business of Your Business
Know the Formal and Informal Org Charts
Influencers are as important as Deciders
Beware the Spoiler
“Culture Eats Strategy For Breakfast”
Don’t Give a Vote or Veto Unnecessarily
Know Who Your Stakeholders Really Are
We will keep discussing this.
Underestimating the power of culture WILL result in your plan faling
That’s a majority of the reason that Strategy Is Hard
Culture Is The Key